Picture of Jürgen Kreileder

Blackdown J2SE 1.4.2-03

I’ve released Blackdown’s J2SE 1.4.2-03 for Linux on x86 and AMD64/EM64T yesterday. The release fixes three security issues with the Reflection API (JRE May Allow Untrusted Applet to Elevate Privileges), so make sure you upgrade.

The issue isn’t Blackdown-specific. Sun released an advisory too.

Thanks to Matthias Klose, Debian packages for 1.4.2-03 are available too. Just add something like

deb ftp://ftp.tux.org/java/debian/ sarge non-free

to your /etc/apt/sources.list.

The Release files are signed with the Blackdown Java-Linux Package Signing Key. If you have recent apt version you can use this key to authenticate our Debian packages. Just import the key with apt-key:

$ wget http://www.blackdown.org/java-linux/java2-status/gpg.asc
$ apt-key add gpg.asc

This article Jürgen Kreileder is licensed under a Creative Commons Attribution-NonCommercial-NoDerivs 3.0 Unported License.


Stay in touch with the conversation, subscribe to the RSS feed for comments on this post. Both comments and pings are currently closed.

Wiktor Wandachowicz said

I think it is the high time for JDK-1.4.2 for sparc + Linux.

I work at the Technical University of Lodz, in Computer Science department, and I have to support a whole lab of Sun Blade 150 machines. No Java means that this lab will become virtually useless. I run Debian GNU/Linux there and I’m considering Gentoo GNU/Linux as well.

My recent trials with upgrading to newer glibc (Debian sarge) resulted in Java 1.4.1 refusing to work at all (SIGSEGV). So, newer Java 1.4.2 is badly needed for everyone running Java on sparc under Linux.

Yeah, it would be nice if we had the SPARC version ready by now. Unfortunately my time for the SPARC port is a bit limited currently.

Dan Beach said

How progressed is it Juergen? I’m sure if we looked around more we could get you some assistance?

J. Wilks said

Recently encountered a bug where XStream failed to instantiate an object via reflection because it was relying on a generated no-arge constructor provided by Sun JVM’s sun.reflect.GeneratedSerializationConstructorAccessor class.

Is there an equivalent class in the Blackdown JVM for instantiating an object on the fly that doesn’t have its own no-arg constructor?

I’m just trying to track down whether this is a limitation in XStream or Blackdown.

Can you send me some test code? There should be no differences in the Reflection implemetion between Sun’s and Blackdown’s JDKs.